Trojan.Encoder.37582

Technical Information

To ensure autorun and distribution

Changes the following executable system files

<SYSTEM32>\taskhost.exe

Malicious functions

Injects code into

the following system processes:

%WINDIR%\explorer.exe

Modifies file system

Creates the following files

%ALLUSERSPROFILE%\microsoft\crypto\rsa\machinekeys\08e575673cce10c72090304839888e02_d4602615-9d50-4880-be41-678935e93eaa
C:\documents and settings\default\documents\my music\ryukreadme.txt
C:\documents and settings\default\documents\my pictures\ryukreadme.txt
C:\documents and settings\default\documents\my videos\ryukreadme.txt
C:\documents and settings\default\downloads\ryukreadme.txt
C:\documents and settings\default\favorites\ryukreadme.txt
C:\documents and settings\default\links\ryukreadme.txt
C:\documents and settings\default\ntuser.dat
C:\documents and settings\default\appdata\roaming\microsoft\windows\network shortcuts\ryukreadme.txt
C:\documents and settings\default\ntuser.dat.log
C:\documents and settings\default\ntuser.dat.log1
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms
C:\documents and settings\default\sendto\desktop.ini
C:\documents and settings\default\sendto\fax recipient.lnk
C:\documents and settings\default\start menu\programs\accessories\accessibility\desktop.ini
C:\documents and settings\default\desktop\ryukreadme.txt
C:\documents and settings\default\documents\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\windows\templates\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\programs\maintenance\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\programs\accessories\system tools\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\media center programs\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\desktop.ini
C:\documents and settings\default\appdata\roaming\microsoft\windows\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\window switcher.lnk
C:\documents and settings\default\start menu\programs\accessories\accessibility\on-screen keyboard.lnk
C:\documents and settings\default\saved games\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\windows\cookies\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\shows desktop.lnk
C:\documents and settings\default\appdata\roaming\microsoft\windows\recent\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\windows\sendto\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\programs\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\programs\accessories\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\windows\start menu\programs\accessories\accessibility\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\ryukreadme.txt
C:\documents and settings\default\appdata\roaming\microsoft\windows\printer shortcuts\ryukreadme.txt
C:\documents and settings\default\start menu\programs\accessories\accessibility\magnify.lnk
C:\documents and settings\default\start menu\programs\accessories\accessibility\ease of access.lnk
C:\documents and settings\default\start menu\programs\accessories\accessibility\narrator.lnk
C:\documents and settings\public\recorded tv\sample media\desktop.ini
C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv
C:\documents and settings\user\ryukreadme.txt
C:\documents and settings\user\appdata\ryukreadme.txt
C:\documents and settings\user\appdata\local\ryukreadme.txt
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application ...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\fe...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\in...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\wi...
C:\documents and settings\default\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\applicati...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\dd_vcre...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\thunderbird\...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\microso...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\feeds\{5588acfd-643...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\feeds\feeds for uni...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\media player\sync p...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\temp\microsoft visual c++ 201...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3...
C:\documents and settings\public\recorded tv\sample media\ryukreadme.txt
C:\documents and settings\default\start menu\programs\maintenance\help.lnk
C:\documents and settings\public\recorded tv\desktop.ini
C:\documents and settings\default\start menu\programs\accessories\system tools\desktop.ini
C:\documents and settings\default\start menu\programs\accessories\desktop.ini
C:\documents and settings\default\start menu\programs\accessories\notepad.lnk
C:\documents and settings\default\start menu\programs\accessories\command prompt.lnk
C:\documents and settings\default\start menu\programs\accessories\run.lnk
C:\documents and settings\default\start menu\programs\accessories\system tools\control panel.lnk
C:\documents and settings\default\start menu\programs\maintenance\desktop.ini
C:\documents and settings\default\start menu\programs\accessories\system tools\private character editor.lnk
C:\documents and settings\default\start menu\programs\accessories\system tools\computer.lnk
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3.default-release\...
C:\documents and settings\public\libraries\desktop.ini
C:\documents and settings\default\start menu\programs\accessories\windows explorer.lnk
C:\documents and settings\public\ryukreadme.txt
C:\documents and settings\desktop.ini
C:\documents and settings\public\desktop.ini
C:\documents and settings\public\downloads\ryukreadme.txt
C:\documents and settings\public\downloads\desktop.ini
C:\documents and settings\public\libraries\ryukreadme.txt
C:\documents and settings\public\libraries\recordedtv.library-ms
C:\documents and settings\public\recorded tv\ryukreadme.txt
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\me...
C:\documents and settings\default\appdata\local\ryukreadme.txt
C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{13a4ee...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{37b8f9...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{42667d...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{6cd9e9...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{929fbd...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{9d29fc...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{a749d8...
C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\ryukreadme.txt
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{b17552...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{cf2bea...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{e699e0...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{ec9807...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{f1b0fb...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{f8cfeb...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\a...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\m...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\search\data...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\42d5bec...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\assistance\...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\device stag...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\star...
D:\$recycle.bin\ryukreadme.txt
D:\$recycle.bin\s-1-5-21-1238866942-1249195528-555854008-1000\ryukreadme.txt
C:\ryukreadme.txt
C:\documents and settings\ryukreadme.txt
C:\documents and settings\all users\ryukreadme.txt
C:\documents and settings\all users\adobe\ryukreadme.txt
C:\documents and settings\all users\adobe\setup\ryukreadme.txt
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\crypto\rsa\machinekeys\08e57...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\package cache\{bd95a8...
C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini
C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acrordrdcupd1501020056.msp
C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab
C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\appl...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\docu...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\micr...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\pack...
D:\ryukreadme.txt
C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\crypto\rsa\s-1-5-18\6d14e4b1...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\search\data\applications\win...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\windows defender\definition ...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\microsoft office 2...
C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\package...
C:\documents and settings\default\appdata\ryukreadme.txt
C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages...
C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\package...
C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\package...
C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages...
C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\package...
C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\package...
C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages...
volume{c693706e-3f85-11ed-82a9-806e6f6e6963}\system volume information\tracking.log.tmp
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{ec9807de-b577-47b1-a024...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{cf2bea3c-26ea-32f8-aa9b...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\42d5bec7ddfbd49e76467529...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{13a4ee12-23ea-3371-91ee...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{a749d8e6-b613-3be3-8f5f...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{bd95a8cd-1d9f-35ad-981a...
C:\documents and settings\default\ryukreadme.txt
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\m...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\microsoft\windows\wer\reportqueue\noncritical_x64_4017a...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\microsoft\windows\wer\reportqueue\noncritical_x64_4a8ed...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\microsoft\windows\wer\reportqueue\noncritical_x64_528c9...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14...
C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12...
C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\microsoft\windows\wer\reportqueue\critical_microsoft .net f_5de...

Moves the following files

from C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini to C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01138_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01162_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00443_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01183_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01157_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01181_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01179_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01585_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01173_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01772_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01631_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmfryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01178_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01366_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00222_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01186_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01170_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00449_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01139_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01637_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cg1606.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00255_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01146_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00121_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00224_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01793_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01638_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01166_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01168_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01080_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01634_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00437_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00445_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grden_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00261_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00414_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00397_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02161_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01658_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00057_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00369_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01548_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00336_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_02.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02153_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01657_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00414_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02158_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00084_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00006_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01191_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00306_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01074_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00361_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00320_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00319_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00074_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00090_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00077_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00296_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00242_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00076_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00096_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fall_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00564_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00086_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00775_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00902_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01196_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\en00202_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00242_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00184_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00008_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00019_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\east_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00648_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00448_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cupinst.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01015_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00524_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00078_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00160_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06200_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00116_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00146_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00145_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00390_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00274_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00135_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01151_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\clip.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00234_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02559_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04369_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00010_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01039_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00525_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04385_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19828_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19695_.wmfryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00165_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10890_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01039_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01639_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01160_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00148_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01152_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01629_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00372_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01586_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01636_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01182_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00407_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01169_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01143_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\craninst.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01171_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01167_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09662_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01163_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01180_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00687_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00100_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01434_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00413_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00923_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00256_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00186_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00174_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00136_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01628_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00234_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00419_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\crane.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00117_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08808_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00130_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\grid_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01080_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086384.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086384.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02155_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01875_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01875_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099171.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099171.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099177.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099177.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099198.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099198.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099169.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099169.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099173.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099173.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099175.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099175.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02312_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02312_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099202.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099202.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099163.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099163.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099170.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099170.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099176.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099176.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00557_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00557_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00919_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00919_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0098497.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0098497.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00957_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00957_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00346_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00346_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099146.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099146.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02313_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02313_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmfryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmfryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00233_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmfryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00177_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099178.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099178.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099159.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099159.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099164.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099164.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099149.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099149.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099200.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099200.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0089945.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0089945.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099192.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099192.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099194.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099194.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099153.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099153.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099196.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099196.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099203.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099203.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmp to %ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmpryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099193.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099193.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099197.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099197.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105306.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105306.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099182.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099182.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105384.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105384.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105388.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105388.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105414.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105414.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105410.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105410.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099184.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099184.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099180.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099180.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099195.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099195.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099181.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099181.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00164_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086426.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086426.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086432.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086432.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090089.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090089.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090390.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090390.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090027.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090027.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090149.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090149.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086478.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086478.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090777.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090777.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090087.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090087.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0089992.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0089992.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086424.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086424.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0086428.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0086428.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099183.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099183.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099179.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099179.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099199.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099199.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099201.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099201.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099205.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099205.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00814_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02068_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01923_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01923_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00586_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01176_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00543_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02115_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01193_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00546_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00527_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00459_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00241_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00260_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00513_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00334_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00526_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00443_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00435_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02116_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02071_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00455_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\fincl_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00297_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\flap.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01660_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00419_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00428_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01084_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02088_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd01659_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00438_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00779_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02141_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00276_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00235_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\fd00544_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01759_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00524_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01065_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00005_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00005_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00116_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00116_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00351_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00351_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00956_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00956_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\indst_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\indst_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00915_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00915_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02166_.wmfryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00118_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00118_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\htech_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\htech_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0090781.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0090781.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00204_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00204_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\in00343_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\in00343_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01461_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00602_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00114_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00114_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02298_.wmfryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh02282_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh02282_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0099151.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0099151.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01058_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01242_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00625_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01291_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01015_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00612_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01013_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00681_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00669_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00693_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00688_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00687_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00601_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hh00685_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\hm00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\hm00172_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19563_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09031_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08758_.wmf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.propertiesryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.propertiesryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties to %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg to %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg.ryk
from %ProgramFiles%\java\jre1.8.0_45\copyright to %ProgramFiles%\java\jre1.8.0_45\copyright.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\classlist to %ProgramFiles%\java\jre1.8.0_45\lib\classlist.ryk
from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties to %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties to %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa to %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar to %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\currency.data to %ProgramFiles%\java\jre1.8.0_45\lib\currency.data.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties to %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt to %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties to %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar to %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gifryk
from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties to %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties to %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\security\trusted.libraries to %ProgramFiles%\java\jre1.8.0_45\lib\security\trusted.libraries.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jarryk
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties to %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gifryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar.ryk
from %ProgramFiles%\desktop.ini to %ProgramFiles%\desktop.ini.ryk
from C:\documents and settings\default\ntuser.dat.log1 to C:\documents and settings\default\ntuser.dat.log1.ryk
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\microsoft office 2... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\microsoft office 2...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\package... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\package...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\package... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\package...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\package... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\package...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\package... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\package...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages...
from volume{c693706e-3f85-11ed-82a9-806e6f6e6963}\system volume information\tracking.log.tmp to volume{c693706e-3f85-11ed-82a9-806e6f6e6963}\system volume information\tracking.log
from C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\desktop.ini to C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\desktop.ini.ryk
from C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\window switcher.lnk to C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\window switcher.lnk.ryk
from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\package... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\package...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages... to C:\documents and settings\all users\application data\application data\application data\application data\application data\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12...
from C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini to C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini.ryk
from C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acrordrdcupd1501020056.msp to C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acrordrdcupd1501020056.msp.ryk
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\appl... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\appl...
from C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab to C:\documents and settings\all users\application data\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab.ryk
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\docu... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\docu...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\micr... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\micr...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\pack... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\pack...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\star... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\application data\star...
from C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi to C:\documents and settings\all users\application data\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi.ryk
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\assistance\... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\assistance\...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\m... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\m...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\crypto\rsa\s-1-5-18\6d14e4b1... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\crypto\rsa\s-1-5-18\6d14e4b1...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\windows defender\definition ... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\microsoft\windows defender\definition ...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\m... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\start menu\programs\microsoft office\m...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11...
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14...
from C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\shows desktop.lnk to C:\documents and settings\default\appdata\roaming\microsoft\internet explorer\quick launch\shows desktop.lnk.ryk
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\a... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\application data\application data\start menu\programs\a...
from %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl to %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar.ryk
from C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14... to C:\documents and settings\all users\application data\application data\application data\application data\application data\application data\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14...
from C:\documents and settings\desktop.ini to C:\documents and settings\desktop.ini.ryk
from C:\documents and settings\public\downloads\desktop.ini to C:\documents and settings\public\downloads\desktop.ini.ryk
from C:\documents and settings\public\libraries\recordedtv.library-ms to C:\documents and settings\public\libraries\recordedtv.library-ms.ryk
from C:\documents and settings\public\recorded tv\desktop.ini to C:\documents and settings\public\recorded tv\desktop.ini.ryk
from C:\documents and settings\public\libraries\desktop.ini to C:\documents and settings\public\libraries\desktop.ini.ryk
from C:\documents and settings\public\recorded tv\sample media\desktop.ini to C:\documents and settings\public\recorded tv\sample media\desktop.ini.ryk
from C:\documents and settings\default\start menu\programs\maintenance\help.lnk to C:\documents and settings\default\start menu\programs\maintenance\help.lnk.ryk
from C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv to C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv.ryk
from C:\documents and settings\public\desktop.ini to C:\documents and settings\public\desktop.ini.ryk
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\me... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\me...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\thunderbird\... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\thunderbird\...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\feeds\feeds for uni... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\feeds\feeds for uni...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\media player\sync p... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\media player\sync p...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3.default-release\... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\thunderbird\profiles\npsdfqy3.default-release\...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application ... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application ...
from C:\documents and settings\default\start menu\programs\accessories\system tools\private character editor.lnk to C:\documents and settings\default\start menu\programs\accessories\system tools\private character editor.lnk.ryk
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\dd_vcre... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\dd_vcre...
from C:\documents and settings\default\start menu\programs\maintenance\desktop.ini to C:\documents and settings\default\start menu\programs\maintenance\desktop.ini.ryk
from C:\documents and settings\default\start menu\programs\accessories\windows explorer.lnk to C:\documents and settings\default\start menu\programs\accessories\windows explorer.lnk.ryk
from C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf to C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.ryk
from C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms to C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.ryk
from C:\documents and settings\default\sendto\desktop.ini to C:\documents and settings\default\sendto\desktop.ini.ryk
from C:\documents and settings\default\start menu\programs\accessories\accessibility\desktop.ini to C:\documents and settings\default\start menu\programs\accessories\accessibility\desktop.ini.ryk
from C:\documents and settings\default\start menu\programs\accessories\accessibility\on-screen keyboard.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\on-screen keyboard.lnk.ryk
from C:\documents and settings\default\start menu\programs\accessories\accessibility\magnify.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\magnify.lnk.ryk
from C:\documents and settings\default\start menu\programs\accessories\accessibility\ease of access.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\ease of access.lnk.ryk
from C:\documents and settings\default\start menu\programs\accessories\accessibility\narrator.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\narrator.lnk.ryk
from C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms to C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.ryk
from C:\documents and settings\default\sendto\fax recipient.lnk to C:\documents and settings\default\sendto\fax recipient.lnk.ryk
from C:\documents and settings\default\start menu\programs\accessories\notepad.lnk to C:\documents and settings\default\start menu\programs\accessories\notepad.lnk.ryk
from C:\documents and settings\default\start menu\programs\accessories\command prompt.lnk to C:\documents and settings\default\start menu\programs\accessories\command prompt.lnk.ryk
from C:\documents and settings\default\start menu\programs\accessories\run.lnk to C:\documents and settings\default\start menu\programs\accessories\run.lnk.ryk
from C:\documents and settings\default\start menu\programs\accessories\system tools\control panel.lnk to C:\documents and settings\default\start menu\programs\accessories\system tools\control panel.lnk.ryk
from C:\documents and settings\default\start menu\programs\accessories\system tools\computer.lnk to C:\documents and settings\default\start menu\programs\accessories\system tools\computer.lnk.ryk
from C:\documents and settings\default\start menu\programs\accessories\system tools\desktop.ini to C:\documents and settings\default\start menu\programs\accessories\system tools\desktop.ini.ryk
from C:\documents and settings\default\ntuser.dat.log to C:\documents and settings\default\ntuser.dat.log.ryk
from C:\documents and settings\default\start menu\programs\accessories\desktop.ini to C:\documents and settings\default\start menu\programs\accessories\desktop.ini.ryk
from C:\documents and settings\default\ntuser.dat to C:\documents and settings\default\ntuser.dat.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04384_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01174_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00790_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02122_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01084_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00173_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00914_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01044_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00170_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01216_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01251_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00965_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00273_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an02724_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04326_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00296_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04108_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd20013_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04355_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04269_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\cup.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\classic2.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\cmnty_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00010_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04235_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd06102_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07761_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00194_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid to %ProgramFiles%\microsoft office\clipart\pub60cor\baby_01.mid.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\boat.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00921_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00392_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00247_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00163_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00045_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00152_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00248_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01545_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an03500_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00169_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04134_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00105_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19988_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07804_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd00160_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00195_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04174_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04117_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\ed00172_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd05119_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04323_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04332_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00252_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00261_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00262_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00267_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00270_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00853_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00015_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00176_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an00932_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01218_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00444_.wmf.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist.ryk
from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txt.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties to %ProgramFiles%\java\jre1.8.0_45\lib\sound.propertiesryk
from %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties to %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties.ryk
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl.ryk
from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties to %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties.ryk
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl.ryk
from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txtryk
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar.ryk
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.ryk
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl.ryk
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.ryk
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.ryk
from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings to %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings.ryk
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts to %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\meta-index.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policyryk
from %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar to %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\net.properties to %ProgramFiles%\java\jre1.8.0_45\lib\net.propertiesryk
from %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja to %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja.ryk
from %ProgramFiles%\java\jre1.8.0_45\license to %ProgramFiles%\java\jre1.8.0_45\license.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\net.properties to %ProgramFiles%\java\jre1.8.0_45\lib\net.properties.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar to %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar.ryk
from %ProgramFiles%\java\jre1.8.0_45\release to %ProgramFiles%\java\jre1.8.0_45\release.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar to %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif.ryk
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00453_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00161_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00184_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01635_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00440_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00200_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00442_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00438_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00526_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd00705_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00932_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs01603_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00167_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00076_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00172_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00012_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bs00092_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0093905.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0093905.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105396.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105396.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19986_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08773_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19582_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd19827_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd07831_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd08868_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\bd10972_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04267_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04191_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04196_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an04225_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00175_.gif.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01060_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\bl00254_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf.ryk
from %ProgramFiles%\microsoft office\clipart\pub60cor\j0105378.wmf to %ProgramFiles%\microsoft office\clipart\pub60cor\j0105378.wmf.ryk

Modifies the following files

D:\$recycle.bin\s-1-5-21-1238866942-1249195528-555854008-1000\desktop.ini
%ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf
%ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf
%ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf
%ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar
%ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar
%ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar
%ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties
%ProgramFiles%\internet explorer\signup\install.ins
%CommonProgramFiles%\microsoft shared\vba\vba7\1033\vbhw6.chm
%CommonProgramFiles%\microsoft shared\vba\vba7\1033\fm20.chm
%CommonProgramFiles%\microsoft shared\themes14\watermar\watermar.inf
%CommonProgramFiles%\microsoft shared\themes14\sumipntg\sumipntg.elm
%CommonProgramFiles%\microsoft shared\themes14\sumipntg\sumipntg.inf
%CommonProgramFiles%\microsoft shared\themes14\sky\sky.inf
%CommonProgramFiles%\microsoft shared\themes14\rmnsque\rmnsque.inf
%CommonProgramFiles%\microsoft shared\themes14\ricepapr\ricepapr.elm
%CommonProgramFiles%\microsoft shared\themes14\pixel\pixel.inf
%CommonProgramFiles%\microsoft shared\themes14\indust\indust.inf
%ALLUSERSPROFILE%\microsoft\search\data\applications\windows\mss.chk
%ALLUSERSPROFILE%\microsoft\search\data\applications\windows\windows.edb
%ALLUSERSPROFILE%\microsoft\search\data\applications\windows\msstmp.log
%ALLUSERSPROFILE%\microsoft\search\data\applications\windows\mss.log
%ALLUSERSPROFILE%\microsoft\search\data\applications\windows\projects\systemindex\secstore\cist0000.000
D:\system volume information\tracking.log
%ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif
%ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif

Modifies multiple files.

Substitutes the following files

%ALLUSERSPROFILE%\Microsoft\Search\Data\Applications\Windows\MSS.log
%ALLUSERSPROFILE%\microsoft\search\data\applications\windows\msstmp.log

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Executes the following

'<SYSTEM32>\searchprotocolhost.exe' Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "%...
'<SYSTEM32>\searchfilterhost.exe' 0 508 512 520 65536 516

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial